WooCommerce Product Addons · Sep 07, 2026, 08:03 AM UTC
Cleanzip133 entriescrc-verifiedphpjavascriptcss
ZIP
0.25 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
WooCommerce Product Add-Ons
Version
8.4.2
Version check
Match
package and product page both state 8.4.2
Author
WooCommerce
Author URI
https://woocommerce.com
Project URI
https://woocommerce.com/products/product-add-ons
Description
Add extra options to products which your customers can select from, when adding to the cart, with an optional fee for each extra option. Add-ons can be checkboxes, a select box, or custom text input.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/admin
ad767702adcf169c…
55.5 KB
JS · assets/js/admin
29bb47b41b26f691…
49.8 KB
PHP · includes
a201e11c92cf2430…
47.8 KB
TXT · package root
4ad25d2fc8e4ec17…
45.9 KB
POT · languages
4c961278d0a78b73…
45.1 KB
JS · assets/js/frontend
e17e6c38f8cc61b3…
44.5 KB
CSS · assets/css/admin
93ff7e81328f0d30…
36.6 KB
CSS · assets/css/admin
aa15ca69ea7f2647…
36.6 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.